// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20001500, "\xaa\xb7\x92\xb3\x06\xce\xa0\xbf\xed\xdb\x24\x7e\xf1\xf8\x04\x51\xb8" "\x10\xce\x17\x5d\x7f\x3f\xab\x7d\x85\xe4\x1d\xf8\xfc\x66\x35\xe3\x00" "\xd4\xf9\x38\x1b\x05\x92\x6e\x0e\x92\x17\xe7\xab\xda\x3c\xc9\xee\x0d" "\x57\x00\xea\xf9\xb8\xa9\x2e\xf4\x08\x6f\x17\x2c\x14\xaf\x77\xe7\xc7" "\x17\xb1\xc9\x96\xe3\x2a\x38\x12\xe9\x79\xbb\xd3\xf6\x1d\x9f\x1f\xdf" "\x62\x2a\xd9\x92\xf9\x3c\x3f\xe7\x5b\xa4\xcc\x27\xd2\x7a\xc8\x0a\x0c" "\xb2\xbd\x77\x30\xd5\x86\x05\xbe\x8b\x45\x1e\x9f\x2e\x0b\x19\xcf\xa3" "\x84\x31\x9c\x77\x6c\x5c\x38\x40\x89\x87\x8b\x98\xd0\xd2\x0e\xc9\x00" "\x31\x75\xcc\xfe\x69\xc3\x69\x7d\xc1\x06\x36\x5c\x59\x1a\xc4\xcd\x34" "\xf1\x4e\xb4\x9c\xb5\xa0\x98\xe3\x3d\xef\xdf\x90\x1b\x4c\x32\xa8\x88" "\x9f\x37\x20\x19\xf3\x66\x41\xfb\xc4\xf0\xf4\xf1\xc0\xbe\x7a\x2b\xa8" "\xf0\x2e\xf2\x79\xc3\x38\xcb\xc2\xe1\x34\x84\x2b\x6d\x10\x3a\x5c\xcd" "\x24\xd7\x07\x64\x44\x53\xdd\xb0\xa3\x2b\xd3\x66", 216); syscall(SYS_pop_ctx, 0x20001500); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }